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We discuss quantum algorithms that calculate numerical integrals and de- 
scriptive statistics of stochastic processes. With either of two distinct ap- 
proaches, one obtains an exponential speed increase in comparison to the fastest 
known classical deterministic algorithms and a quadratic speed increase in com- 
parison to classical Monte Carlo (probabilistic) methods. We derive a simpler 
and slightly faster version of Grover's mean algorithm, demonstrate how to apply 
quantum counting to the problem, develop some variations of these algorithms, 
and show how both (apparently quite different) approaches can be understood 
from the same unified framework. Finally, we discuss how the exponential speed 
increase appears to (but does not) violate results obtained via the method of 
polynomials, from which it is known that a bounded-error quantum algorithm 
for computing a total function can be only polynomially more efficient than the 
fastest deterministic classical algorithm. 
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1 Introduction 



Quantum algorithms have been discovered that can solve many problems faster 
than the best known classical algorithms. Most famous are Shor's factoring 
algorithm [p^ and Grover's searching algorithm0|^, but quantum computers 



and medians with a quadratic speedup Q , and solve a variety of artificial prob- 
lems 1^ exponentially faster than is possible classically. Still, due (perhaps) 
to the enormous technical challenges that must be overcome before a useful 
quantum computer can ever be built, there is a general sense that more ap- 
plications must be found in order to justify attempts to construct a quantum 
computing device. 

We suggest one possible application of a quantum computer, namely, com- 
puting the values of integrals. This problem can be solved in a fairly straight- 
forward manner via either quantum counting or Grover's mean estimation 
algorithm Although these algorithms are not new, this application may be 
the most useful one described to date. (Because N operations are required to 
retrieve N values from a classical database, the mean finding algorithm affords 
no speed-up when applied to a pre-existing data set. Indeed, even the original 
database search algorithm has only limited utility, because it can only be used to 
search a function space, not a true database. It not clear to how many real-life 
problems it could be applied iQ). We also show how these apparently different 
algorithms can be understood from a unified perspective, thereby explaining 
their equivalent computational complexity. 

In addition, we suggest that a quantum computer may be used to deter- 
mine various characteristics of stochastic processes (for example, stock prices). 
Frequently, such processes are used to generation distribution functions, and 
one wishes to know the mean, variance, and higher moments. One can apply 
quantum counting and mean estimation to obtain super-classical speedups for 
these problems as well. 

On a quantum computer, one can find the value of a d-dimensional integral 
in 0(l/e) operations, where e is the desired accuracy. It follows from the results 
of Nayak and Wu that this is in fact a lower bound. Classically, one requires 
0(l/e^) operations to achieve the same accuracy using probabilistic methods, 
and requires 0(l/e'^) - exponentially more - operations to achieve the same 
accuracy deterministically. (More precisely, it is polynomial in the accuracy 
and exponential in the number of dimensions). Since real computers and all 
classical devices are in fact deterministic, this exponential speed increase is by 
no means a red herring. Indeed, there is a popular misconception that real 
computers can perform probabilistic algorithms with impunity by employing 
pseudo-random number generators. Of course, pseudo-random numbers are not 
truly random at all - and one must in fact be careful about treating them as 
such. For example, in 1992 Ferrenberg et al. found bugs in a supposedly good 
pseudo-random number generator when a numerical simulation of an Ising spin 
system failed due to hidden correlations in the "random" numbers Q. The 
moral here is that one cannot rely upon a classical computing device to properly 
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execute a probabilistic algorithm. In some (more than merely technical) sense, 
the quantum algorithm for evaluating integrals provides an exponential speed 
increase. 

The rest of this paper is organized as follows: first, we formalize the prob- 
lems and discuss the relevant classical algorithms. We then review Grover's 
search algorithm from the more general perspective of amplitude amplification. 
We describe two different approaches to mean estimation, one using amplitude 
amplification and the other quantum counting, and provide a new, simpler, and 
slightly faster version of the former algorithm. We discuss some variations of 
these algorithms and show how they are essentially the same. Finally, we con- 
clude with a discussion of the lower bounds set by the method of polynomials, 
and explain why they must be applied with greater care than one might first 
suppose. 



2 Statement of the problem and classical algo- 
rithms 

Without loss of generality, we consider integrals of a real-valued d-dimensional 
function g{xi,X2, ■■■Xd) defined for Xi in the range [0, 1] and where g{xi,X2, ■■■Xd) G 
[0, 1], for all values of Xi. Thus we seek to calculate 

/ ■■■ g{xi,X2, ■■■Xd)dxidx2...dxd (1) 
Jo Jo Jo 

In the discussion that follows, we shall approximate g with a real-valued d- 
dimensional function /(ai, 02, ...a^) defined over integral values a; in the range 
[1, M] and where 

/(ai,a2,...a,) = g(-, -,...-) (2) 
Thus, we wish to find the sum 

^ M M M 

^= H - 5Z -''(°i'«2.-ad) (3) 

xi — l X2 — I x^ — l 

Note that the sum S is identical to the average of / over all a^. The accuracy 
with which the sum S approaches the integral / is obviously determined by the 
density of points M in each variable and the shape of the particular function. 
However^, in what follows, our sole concern will be with approximating the sum 
S. 



^Because the computational complexity of the quantum algorithms (and also the classical 
Monte Carlo algorithms, for that matter) depend only logarithmically on M, this approxima- 
tion is not a limiting factor (as long as the function is not pathological). 
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A sum of this form can also be used to determine properties of a stochastic 
process. We describe a stochastic process by a sequence of values, wi,W2, ■■■,wn, 
where each value Wi is chosen randomly from a distribution which may depend 
on some (or all) Wj for j < i. For example, a simple one dimensional random 
walk might be described by a sequence for which each Wi is either {wi-i + 1) or 
{wi-i — 1) with equal probability. Often, one is interested in a property of such 
a sequence that can be represented as a function v{wi,W2, ■■■,wn)- (In many 
cases, the function v may depend only upon the final value wn)- One wishes 
to determine the mean, variance, skewness, and possibly higher moments of 
the function v over the space of all possible sequences. This problem is easily 
transformed into the form (|l]) through a change of variables: write each Wi as a 
function Wi{ri,wi,W2, Wi-i), where is a random variable in the range [0,1]. 
Then we can write w as a function ?;(ri, r2, r^v) of the independent random 
variables , scale the output so that it fits within the desired range, and we 
have a function in the form g above. The mean value of the stochastic process is 
then simply the integral (|^) . Once again, we represent the integral as a discrete 
sum. (For some stochastic processes, the problem may in fact be discrete from 
the beginning). Thus the problem again reduces to finding the sum S* in (^. 

One can find higher moments of a stochastic process by simply applying the 
above approach to a calculation of the mean of w^, w'^, etc. This method can of 
course also be applied to calculate moments of any distribution function (even 
if it is not the result of a stochastic process) as long as it can be represented in 
closed form. 

It should be intuitively obvious that without any knowledge of the function /, 
one requires classically 0{M'^) operations to evaluate the sum. More precisely, 
if we view / as an oracle (or "black-box"), then one requires at least 
queries to determine S to within ±j. (This is because it is possible that the 
remaining unqueried function values may be either all O's or all I's, one 

of which will always shift the mean by at least ^). It follows that an ordinary 
classical Turing machine requires exponentially many operations to determine 
S with accuracy e for any ^ < j- 

However, if one is allowed to employ a probabilistic algorithm, then one can 
randomly sample values of the function / for various ai, 02, ...a^; as long as the 
values of at are chosen randomly (and provided that you are not exceedingly un- 
lucky), it is possible to quickly approximate S to any desired precision. Indeed, 
it is a straightforward consequence of the central limit theorem that one can 
determine S with accuracy e (with bounded probability) using only 0(1/ e^) 
operations. Note that the number of trials does not depend at all upon the size 
of the function's domain - as it did in the deterministic case - but only on the 
desired accuracy. This is in fact how Monte Carlo integrals are computed, and is 
essentially the only practical way to calculate integrals of functions with high di- 
mensionality. (It is also why we are not concerned with the approximation of the 
integral I with the sum S - one can make M essentially as large as one desires, 
paying only a logarithmic cost in computational complexity). Unfortunately, 
Monte Carlo integrals on classical devices require the use of a pseudo-random 
number generator, and as mentioned previously, there is no guarantee that one 
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will obtain "good" random numbers. One obvious way to solve this dilemma 
would be to use a simple quantum event to produce a string of truly random 
numbers; but once one introduces quantum mechanics into the problem, we can 
find an even more effective solution. 

3 Principle of Amplitude Amplification 

Both of the quantum algorithms discussed in this paper require a generalized 
version of Grover searching. The treatment below follows that of Grover 
similar ideas have also been described by Brassard et. al. Q and various 
others. 

All quantum algorithms consist of unitary operations applied in series. Any 
sequence of unitary operations can be viewed as a single unitary operator. Con- 
sider a particular unitary operator U which has amplitude Uts between a start- 
ing state \s) and a target state \t). If the computer is initially in the state |s), 
then after one application of U the computer will be found in the state \t) with 
amplitude Uts, and if the state of the computer is measured in the canonical 
basis, the probability of obtaining the state \t) will therefore be |J7ts|^- We seek 
to amplify the amplitude of the state \t). (Increasing the amplitude of this 
state increases the chances that it will be found upon measurement and thereby 
allows for fast searching). 

Amplitude amplification in its simplest form requires the inversion operator 
Ix which inverts the phase of the state \x). We compose the unitary operators 
/ and U to form the unitary operator G in the following way:. 

G = -IsU-^ItU (4) 

It can be easily verified that the operator G leaves invariant the subspace 
spanned by \s) and U~^\t). In particular, one finds that 

G {a\s) + pU-^\t)) - {(1 - 4 \Uts\')a -f 2Utsp] \s) + {-2[/;,a + /?} U-^\t) 

(5) 

which is approximately a rotation by 2 \ Uts\ radians. It follows that by applying 
0(1/ \Uts\) iterations, one can obtain the state U~^\t) with near certainty. 

The original fast searching algorithm Q applies the above steps with U = W, 
where W is the Walsh-Hadamard transform - that is, a 7r/2 rotation of each 
qubit. If the initial state |s) = |00...0), then \Uts\ = \Wts\ = 1///V for all 
possible target states \t). The unitary operation /( selectively inverts the phase 
of the actual target state \t) for which we are searching. After one application 
of W, the probability of measuring \t) would be only -i-, the same as one would 
obtain classically by guessing. However, it follows immediately from the above 
that the amplitude \t) can be amplified to nearly 1 by applying only 0{\/N) 
operations. 
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4 Integrals via Amplitude Amplification 



To evaluate the integral / in (|l|) (or alternatively the sum S in (^), one can 
use the mean estimation algorithm described by Grover in We provide 
a simpler variation on this algorithm, which distills the essential features from 
the original algorithm, but eliminates unnecessary unitary operations and qubits 
while retaining the essentials of the approach. 

The algorithm works by refining a series of approximations. One can obtain 
an intuitive understanding of the approach by employing an analogy to classical 
coin-flipping: although it is tricky to describe, the algorithm is actually quite 
simple in practice. Consider a coin, which, when tossed, comes up heads with 
probability pi — S. By the central limit theorem, one can determine S with 
accuracy S using 0(1/ (5^) trials. Let us call the first estimate so obtained Ei 
and the error Si. Then with high probability Ei — S/2 < pi < Ei + S/2. We 
now wish to "zoom in" on this interval and determine S more accurately within 
these bounds. We thus define the difference D i = S — {Ei — 6/2), that is, the 
distance that S is from the bottom of the interval. Thus with high probability 
Di is bounded by and 6. We "zoom in" by rescaling this value so that it is 
bounded by [0, 1] and call this value p2, that is p2 = Di/5. 

We now imagine a second iteration, where we are provided with a second 
coin which lands heads with probability p2- Of course, one could not actually 
make such a coin without knowing S ahead of time, which would defeat the 
purpose. However, in the analogous quantum problem it will be possible, so we 
shall imagine that someone can in fact provide for us the coin with probability 
P2. As with pi, one can determine p2 with accuracy 5 using 0(1/ 5^) trials. 
Call this estimate E2\ then E2 — 5/2 < P2 < E2 + S/2 with high probability. 
However, because P2 = Di/6, an estimate of P2 with accuracy S is an estimate 
of Di with accuracy (5^. Since S = D 1 + {Ei — S/2), we thus obtain an estimate 
of S to accuracy S^. 

We continue this process with further iterations. Let D2 = S — {Ei — S/2) — 
{E2 — S/2)S, which is evidently bounded by [0,(5^]; we define p^ by rescaling 
D2: that is, P3 = I?2/<5^, which is bounded by [0, 1]. We imagine a third coin 
with probability of heads ps and determine this probability to accuracy S using 
0(1/ 5^) trials, as before. But since ps = D2/S'^, this implies an estimate of 
D2 to accuracy S^, which implies an estimate of S to accuracy S^. We then let 
D3^S-{Ei- S/2) - [E2 - S/2)S - (£'3 - (5/2)(52, etc. Each iteration requires 
the same number of coin tosses, but improves our estimate by a factor of S. 
With 0(n/ S"^) tosses, we estimate S with accuracy 5". Phrased differently, the 
required number of coin tosses scales only as the log of the desired accuracy. 
However, let us reiterate that this classical algorithm could not actually be 
used in practice; it is discussed only to serve as an analogy to the quantum 
algorithm, described below. It highlights the fact that the final complexity of 
the algorithm will not be limited by the number of trials (which we have seen is 
only logarithmic in the desired accuracy), but by the fact that 0(1/ e) quantum 
logic operations are required to prepare the final coin-like-state (that reveals S 
to accuracy e). 



6 



Wc will now describe the quantum algorithm. Let E be the current best 

estimate for S; that is 




E={Ei- 6/2) + {E2 - 5/2)5 + {E^ - 5/2)5' + ... + {E^ - 5/2)5"-' (6) 

As before, let D = S — E. Wc^ wish to obtain an estimate for D with accuracy 
5'^. To begin, we define a new function f = f — E. Recall that 

(7) 

M-l \ 

E f{ai,a2,...ad)\-E (8) 

^ ai,a2,...a<i=0 / 
^ M-l 

= Md Yl f'{ai,a2,...ad) (9) 

ai,a2,---ad=0 

In other words, D is the average value of /'. The essential quantum part of 
the algorithm is to estimate the average value of /'; from this, we will simply 
iterate to obtain finer estimates. To calculate the average, consider a quantum 
computer with (ilogj M + 1 qubits. Label the states |r)|oi, 02, ...Ud) where the 
first qubit r is a work qubit and the remaining qubits indicate a value in the 
domain of /. The computer is placed initially in the zero state: |0)|00....0). We 
begin by applying a Walsh-Hadamard transform to the function qubits in order 
to obtain an equal superposition of all possible values for the Oj: 



1*1) = 7^ E |0)|ai,a2,...arf) (10) 
Next we rotate the first qubit by an amount /'. The state is then 

^ M-l 

1*2) = ^= Yl \/l - /'(ai) 02, ...ad)2|0)|ai, a2, ...ad) + /'(ai, 02, ...ad)|l)|ai, 02, ...ad) 
v M"" — 

01,02, ■■■dd—O 

(11) 

Finally, we perform the inverse of the Walsh-Hadamard transform used in the 
first step. It is easy to see that the amplitude of the state |1)|00...0) will then be 
D (because each state |l)|ai,a2, ...ad) contributes amplitude -y=^/'(ai, 02, ■■■ad) 
to the state |1)|00...0)). An estimate for D can therefore be obtained by making 
measurements of the state of the system in repeated trials, and counting the 
frequency of the result |1)|00...0). To obtain an accuracy e requires 0(1/ e^) 
measurements . 

However, we can use amplitude amplification to increase the accuracy of our 
estimate. The steps described above can be viewed as a single unitary operation 
U that has amplitude \Uts\ between the starting state \s) = |0)|00...0) and the 
target state \t) = |1)|00...0). It follows that one can use amplitude amplification 
to increase the probability of measuring the state |1)|00...0). By performing only 
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0{N) operations, one can increase the amplitude of \t) to N * D. The largest 
value one can choose for N is 0(l/5*^) (because the magnitude of D is 0{S'^) 
and the norm of the amplified amplitude is bounded by one) . In this case, the 
probability amplitude for the target state is then roughly Borrowing 
from our earlier classical analogy, this is the scaled ( "zoomed- in" ) value Pk+i- 
With the same 0(1/ e^) trials, we thus determine pfc+iwith accuracy e, but this 
provides an estimate of D with accuracy e* = e/N ^ eS^. If we vary N and fix 
e, we perform only 0(l/e*) operations to find D with accuracy e*. 

Because of the limit on the size N, the algorithm requires several iterations. 
Initially, D may be any value between and 1, and hence A'^ can be at most 
1. (That is, we cannot use amplitude amplification at all). As the estimates 
become more accurate, then the value of D becomes correspondingly smaller, 
and one can choose larger and larger N. 

Just as in the classical case, each estimate pk is determined with a fixed 
number of trials, but since the corresponding estimates of D (and 5") become ex- 
ponentially more accurate with each iteration, the total number of trials is only a 
logarithmic function of the desired accuracy. Hence, the significant contribution 
to the computational complexity is not the number of trials. Instead, the com- 
plexity is determined by the amplitude amplification. Within a polylogarithmic 
factor, the entire cost of the algorithm occurs on the last iteration (because each 
iteration takes exponentially more time) . The computational complexity of the 
entire algorithm is therefore the same as the amplitude amplification of the last 
iteration: 0(1/ e*) operations are required, where e* is the desired accuracy. 

It is interesting to note that, as with the classical Monte Carlo method, 
the quantum algorithm depends only upon the desired accuracy: the size of the 
function's domain (Af*) is irrelevant. 



5 Integrals via Quantum Counting 

There is another algorithm which can be used to evaluate the sum 5 in (^, 
based upon the idea of quantum counting [|| . To use this method, one must first 
convert the real-valued function /(ai,a2, ...a^) into a boolean valued function. 
This is accomplished via the addition of an extra parameter q. The parameter 
takes on integral values in the range [1,Q] where Q is determined by the desired 
accuracy. We then define 

if g > /(oi,a2, ...Od) * Q ^ ' 

In other words, for a given 01,02, ...Od,the fraction of the Q values for which 
6(ai, 02, ...Od, (7) = 1 is the best approximation to /(oi, 02, ■■■ad)- It follows that 
the average value of b is identical to the average value of /. However, since 

6 is a boolean-valued function, one can estimate the average value of b via 

^Because the amplitude amplification process is not exactly linear, the final amplitude is 
not exactly D/&^ . However, this difference can be easily accounted for and has no effect on 
the computational complexity of the algorithm. 
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approximate counting. That is, S = (b) = jjtq, where r is the number of 
solutions 6(ai, 02, ...ad, g) = 1. To count the number of solutions r, we recall 
that during the amplitude amplification process, the state of the system rotates 
within the subspacc spanned by |,s) and U^^\t) at a rate which is proportional 
to \Uts\- Moreover, we recall that by using the Walsh-Hadamard transform 
for U (as in the Grover search algorithm), the magnitude of Uts is exactly 
|?7/,,| = \Wts\ — 1/VN for any given target state But if the target state is a 
sum over all basis vectors for which b{i) = 1, that is, \t) = Yl N)i ^^^^ the 



amplitude of \Uis\ = ^r/N. Hence the amplitudes of the states |,s) and U~^\t) 
will oscillate with a frequency that depends on r. It is therefore a simple matter 
to create a superposition 



and determine the value of r by performing a fast Fourier transform on the first 
register. The accuracy 1 /A will depend linearly upon the number of points used 
in the FFT, as will the number of quantum logic operations (because it takes 
0(1) operations to perform G, one requires 0{A) operations to create the state 
l^*) above). It follows that one can determine the value of the integral / to 
accuracy e with 0(l/e) operations, as in the previous algorithm. Also as above, 
we find that the number of operations does not depend upon the size of the 
domain of /, but only upon the desired accuracy. 

6 Discussion 

At first, it may appear surprising that these two very different quantum al- 
gorithms should both require 0(l/e) operations. However, by exploring some 
variations of these algorithms, we find that, while not identical, they are both 
quite similar. 

First, we note that there is a trivial variation of quantum counting, which 
is simply to measure the state of the system in repeated trials, and count the 
number of times one obtains the target state (or more precisely, a state for 
which b{ai,a2, ...ad,q) = 1.) That is, we determine the fraction j^wq = (b) = S 
through random sampling. This technique is directly analogous to the way, 
in Grover mean estimation, we find the probability pi through repeated trials 
(counting the number of times we measure the target state |1)|00...0)). In both 
cases, 0(l/e^) operations would be required to obtain an accuracy e. The 
difference is that using the Grover method, one can subtract the most recent 
estimate from each term in the sum (to obtain the function /'), and then perform 
amplitude amplification to increase the probability of obtaining the target state. 
By amplifying this difference, the precision of the algorithm is limited by the 
(nearly) linear amplitude amplification process rather than by the quadratic 
sampling process. In the case of quantum counting, one can also apply the 



i£6(i) = l 




A-1 



(13) 
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amplitude amplification process to the target state (indeed, this is exactly what 
the quantum counting algorithm does). However, one cannot subtract the most 
recent estimate from each term in the sum: specifically, for a given ai, a2, ■■■ad-, 
there can be no less than zero values of q for which b{ai, a2, ■■■Qd, q) — 1- In the 
Grover method, individual terms in the sum may be negative, even though the 
sum of all the terms is always positive. The counting method does not allow this 
possibility. It is therefore impossible to use the technique of iterated, refined 
estimates to increase the precision of the approximation. 

The relationship can be viewed from another perspective by considering a 
variation of Grover's method. As presented earlier, the technique depends upon 
measuring the amplitude of the target state |1)|00...0). This is accomplished 
through repeated measurements. However, one can also determine this ampli- 
tude with a quantum FFT. Recalling once again that during the amplitude am- 
plification process the state of the system rotates within the subspace spanned 
by |s) and U~'^\i), at a rate which is proportional to \Uts\ (which in this case 
is equal to p^), we see that one could also use an FFT to determine \Uts\ (and 
therefore pfc)- As in the case of quantum counting, one requires 0(l/e) opera- 
tions to obtain the result with accuracy e. Moreover, because the FFT measures 
the frequency of the rotation, one does not need to perform the iterated esti- 
mates (which previously ensured that the initial amplitude \Uts\ was sufficiently 
small that it would in fact be amplified throughout the entire process). 

The situation is in many ways similar to the relationship between Shor's 
algorithm and Kitaev's algorithm pO|. In the Kitaev algorithm, one estimates 
the phase of an eigenvalue (/> of a unitary operator U . The number of operations 
required to estimate 4> grows polynomially with the desired precision, but Kitaev 
obtains exponential precision by considering f/^, f/"*, [/^,etc. This process is 
analogous to the refined estimates used in the Grover method. In [Q, Cleve 
et. al. describe how to modify Kitaev's algorithm so that it uses an FFT to 
estimate the phase. The resulting algorithm is then identical to Shor's. 

A final variation of these mean finding algorithms arises naturally from the 
following consideration^ In (our version of) the Grover algorithm, we apply 
the unitary operators W~^RW, where W is the Walsh-Hadamard transforma- 
tion and R is the rotation by /' (which maps jvE'i) to \'i>2) in the previous 
description). The three unitary operators W~^RW take the initial zero state 
into a target state with an amplitude proportional to the number we seek 
to estimate. In the quantum counting algorithm, we begin with the zero state, 
and apply only the operator W to obtain a (different) target state, also with 
an amplitude that is proportional to the (square root of the) number we wish 
to estimate. In the final variation, we apply the operators RW: that is, we 
leave out the final inverse Walsh-Hadamard, and (to compensate) use a slightly 
different rotation ]?. Because it is the rotation R that shifts the amplitude ac- 
cording to the function we are trying to estimate, the final W is in some sense 
an extra, unnecessary step. However, if we use the original rotation R from the 
modified Grover algorithm and consider the target state to be all those states 

*This last variation on quantum counting was suggested by Peter Hoyer. 
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where the first qubit is |1), the amplitude of the target state would then be pro- 
portional to the sum (or mean) of all values of / squared - which is not quite 
what we desire. Hence we simply perform a modified rotation R. which rotates 
by ^/f, in which case the target state will occur with probability proportional 
to the sum of all values of y/J squared, i.e., to the mean of /. By repeated 
iterations of this process, we can perform an FFT (as in quantum counting) and 
determine the mean of / with the same linear scaling that we obtain with the 
other approaches. 

It is worth noticing that in this last variation, as with the original quantum 
counting, one cannot use the method of iterated estimates (like we did in the 
original Grover technique) because - once again - it is not possible to account 
for negative values of /'. It is also interesting to compare this method with the 
original algorithms and ask why we need to introduce the square root? With 
respect to the original Grover technique, this is because of the difference between 
summing and then squaring (as we do in the original algorithm) and squaring 
and then summing (which we do in the later algorithm). However, in the case 
of quantum counting, the amplitude of the final state is determined by squaring 
and then summing as well. But since the original quantum counting applies to 
boolean values, all components of the superposition occur with equal weight, 
and the result is the same. 

The algorithms described above are summarized by the following chart: 
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|s) |t) U \Uts\ Method Complexity 

|o)|oo...o) |i)|oo...o) w-'RW s f3^°t;;:^,,, 0(1/.) 

|0)|00....0) |1)|00....0) W-'^RW S FFT 0(l/e) 

100.. ..0,0) I*) W s/S FFT 0(l/e) 

jeo(i)=i ^ ' ' 



|0)|00....0) E>|l)|ai,a.,...a.) ^ (rSe:^ted estimates) ^(^e^) 



M-l ^ 

|0)|00....0) E \/7|l)|ai,a2,...ad) W FFT 0(l/e) 

ai=0 

(14) 

We see, therefore that the two apparently distinct algorithms are in fact both 
very closely related. In both cases, we perform a sequence of unitary operations 
that generate an operator with amplitude \Uts\ to make a transition from the 
|0) state to the target state |i), where the value of \Uts\ depends directly on the 
sum S. In both cases, we can use a quantum FFT to estimate the value of 
\Uts\ and approximate S with accuracy e in 0(1/ e) operations. In both cases, 
we can estimate the value of \Uts\ directly through repeated measurements and 
then approximate S with accuracy e in 0(1/ e^) operations. The only difference 
is that in Grover's method, the particular form of the operator U allows one 
to consider negative values /', which in turn allows one to use the process 
of iterated, refined estimates and thus to obtain linear precision directly with 
repeated measurements instead of with the fast Fourier transform. 



7 Conclusion 

To briefly summarize: we have proposed two new applications for quantum com- 
putation: evaluating integrals and calculating descriptive statistics of stochastic 
process. Whereas 0{M''-) operations are required on a classical deterministic 
Turing machine, and 0(1/ e^) operations are required with a classical proba- 
bilistic algorithm, one can obtain the same accuracy on a quantum computer 
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with only 0(1/ e) quantum operations, using two different algorithms. We have 
provided a simpler (and slightly more efficient) version of Grover's mean-finding 
algorithm, demonstrated how quantum counting can be applied to mean esti- 
mation, derived some variations of both algorithms, and shown how the two are 
very closely related. 

In concluding, we would like to make two points. The first is that, while 
these algorithms are probabilistic in nature, the mean estimation algorithms 
employing FFTs do not rely upon sampling the function space, as do classical 
Monte Carlo methods. The quantum algorithms in some sense consider the 
entire (exponentially large) domain of the function all in one shot, and, with 
high probability, return the mean to within the desired accuracy. 

Second, it is interesting to consider our results in light of the work by Beals 
et. al. Q|, where it is proven (using the method of polynomials) that a bounded- 
error quantum algorithm for computing a total function can be only polynomi- 
ally more efficient than the fastest deterministic classical algorithm. A boolean 
function 6(ai, 02, ...Od, q) such as the one described in Section 5 can be described 
as a sequence of M'^q boolean values; the average of 5 is a function of those M'^q 
boolean values, and it is a total function, since it is well-defined for all possible 
input functions b. In order to phrase mean-estimation as a decision problem, we 
can ask: "Is the average value of b within the range [E— e, E+ e] ?" (for some 
chosen E and e) . Naively, it appears that the results of |^ would imply that this 
problem cannot be speed up more than polynomially on a quantum computer 
(vs. a classical deterministic computer) - whereas we have just finished demon- 
strating an exponential separation. It appears that there is a contradiction.^ 

The (in fact quite simple) resolution of this problem is that the decision 
question posed above does not quite correspond to mean-estimation. According 
to the question given, a function with mean just slightly (infinitesimally) more 
than E+ e does not have a mean that is approximately E, whereas a function 
that has mean exactly E+ e does. Of course, our quantum algorithms cannot 
reliably differentiate between these two cases in polynomial time any better than 
the classical deterministic algorithms can. The decision question that one can 
associate with mean-estimation would be a probabilistic one; the answer should 
be sometimes yes and sometimes no with a probability that depends (perhaps 
as a gaussian function) upon the distance the true mean is from the estimate 
E. Such a question is not a function (although it can be viewed as the average 
value of a weighted ensemble of functions). Thus, the results obtained in |^ do 
not apply to our problem, and there is no contradiction. 

In concluding therefore the authors would like to make the following point. 
It is easy for results such as those in |^ to cause one to be disheartened about the 
prospects of quantum computing. However, sometimes the "real" problems we 
wish to solve have special properties that can make them easier than the general 
cases. Calculating approximate integrals is one such example - and there are 
likely others waiting to be discovered. 

^Actually, this issue applies equally to the exponential separation between the classical 
deterministic and probabilistic algorithms. 
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